Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 04:58:55.405 00:00:10.369 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:59:27.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-09-23 04:59:55.812 00:00:10.367 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:56:32.318 00:05:01.393 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:00:27.611 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-09-23 05:00:56.222 00:00:10.365 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:57:32.321 00:05:01.388 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:01:27.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55270 10 6452 1 2025-09-23 05:01:56.628 00:00:10.357 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:02:12.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:02:12.851 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:02:27.991 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-09-23 05:02:57.028 00:00:10.371 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:03:28.216 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48468 10 6452 1 2025-09-23 05:03:57.437 00:00:10.357 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:04:28.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-09-23 05:04:57.834 00:00:10.349 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:05:28.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-09-23 05:05:58.230 00:00:10.371 TCP 23.104.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:02:32.320 00:05:01.393 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:06:28.867 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-09-23 05:06:58.639 00:00:10.365 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:07:12.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:07:12.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:03:32.322 00:05:01.387 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:07:29.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-09-23 05:07:59.049 00:00:10.371 TCP 23.104.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:08:29.316 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6452 1 2025-09-23 05:08:59.458 00:00:10.367 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:09:29.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-09-23 05:09:59.860 00:00:10.371 TCP 23.104.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:10:29.745 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-09-23 05:11:00.274 00:00:10.371 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:11:29.957 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46086 10 6452 1 2025-09-23 05:12:00.685 00:00:10.363 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:12:12.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:12:12.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:08:32.322 00:05:01.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:12:30.178 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-09-23 05:13:01.095 00:00:10.376 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:09:32.324 00:05:01.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:13:30.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55634 10 6452 1 2025-09-23 05:14:01.506 00:00:10.325 TCP 23.104.0.1:42078 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:14:30.612 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-09-23 05:15:01.862 00:00:10.332 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:15:30.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-09-23 05:16:02.232 00:00:10.619 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:16:31.072 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-09-23 05:17:12.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:17:02.887 00:00:10.371 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:17:12.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:17:31.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-09-23 05:18:03.299 00:00:11.105 TCP 23.104.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:14:32.322 00:05:01.402 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:18:31.523 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-09-23 05:19:04.456 00:00:10.361 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:15:32.325 00:05:01.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:19:31.730 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 10 6452 1 2025-09-23 05:20:04.857 00:00:10.370 TCP 23.104.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:20:31.938 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-09-23 05:21:05.262 00:00:10.323 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:21:32.130 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-09-23 05:22:13.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:22:13.137 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:22:05.622 00:00:10.325 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:22:32.305 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-09-23 05:23:05.986 00:00:10.363 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:23:32.475 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-09-23 05:24:06.384 00:00:10.360 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:20:32.323 00:05:01.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:24:32.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-09-23 05:25:06.784 00:00:10.326 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:21:32.327 00:05:01.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:25:32.900 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45926 10 6452 1 2025-09-23 05:26:07.147 00:00:10.361 TCP 23.104.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:26:33.112 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 2025-09-23 05:27:13.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:27:13.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:27:07.546 00:00:10.368 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:27:33.281 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51390 10 6452 1 2025-09-23 05:28:07.945 00:00:11.079 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:28:33.496 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-09-23 05:29:09.092 00:00:10.379 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:29:33.727 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-09-23 05:30:09.512 00:00:10.367 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:26:32.324 00:05:01.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:30:33.938 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-09-23 05:31:09.922 00:00:10.384 TCP 23.104.0.1:43974 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:27:32.328 00:05:01.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:31:34.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 10 6452 1 2025-09-23 05:32:13.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:32:13.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:32:10.345 00:00:10.363 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:32:34.392 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-09-23 05:33:10.766 00:00:10.338 TCP 23.104.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:33:34.614 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-09-23 05:34:11.142 00:00:10.373 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:34:34.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6452 1 2025-09-23 05:35:11.559 00:00:10.361 TCP 23.104.0.1:41588 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:35:35.052 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-09-23 05:36:11.958 00:00:10.322 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:32:32.324 00:05:01.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:36:35.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-09-23 05:37:13.355 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:37:13.351 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:37:12.317 00:00:10.364 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:33:32.329 00:05:01.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:37:35.480 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-09-23 05:38:12.713 00:00:10.366 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:38:35.687 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-09-23 05:39:13.112 00:00:10.368 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:39:35.900 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-09-23 05:40:13.523 00:00:10.368 TCP 23.104.0.1:34572 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:40:36.102 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-09-23 05:41:13.935 00:00:10.374 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:41:36.323 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-09-23 05:42:13.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:42:13.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:42:14.349 00:00:10.364 TCP 23.104.0.1:38796 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:38:32.333 00:05:01.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:42:36.502 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-09-23 05:43:14.754 00:00:10.320 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:39:32.335 00:05:01.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:43:36.708 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-09-23 05:44:15.109 00:00:10.362 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:44:36.875 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-09-23 05:45:15.509 00:00:10.366 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:45:37.093 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51452 10 6452 1 2025-09-23 05:46:15.911 00:00:10.360 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:46:37.305 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6452 1 2025-09-23 05:47:13.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:47:13.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:47:16.316 00:00:10.375 TCP 23.104.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:47:37.480 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-09-23 05:48:16.722 00:00:10.371 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:44:32.334 00:05:01.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:48:37.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-09-23 05:49:17.132 00:00:10.368 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:45:32.336 00:05:01.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:49:37.900 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39158 10 6452 1 2025-09-23 05:50:17.541 00:00:10.319 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:50:38.122 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6452 1 2025-09-23 05:51:17.903 00:00:10.368 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:51:38.339 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-09-23 05:52:13.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:52:13.375 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:52:18.307 00:00:10.361 TCP 23.104.0.1:59420 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:52:38.554 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-23 05:53:18.704 00:00:10.373 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:53:38.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40992 10 6452 1 2025-09-23 05:54:19.114 00:00:10.364 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:50:32.336 00:05:01.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 05:54:38.941 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-09-23 05:55:19.522 00:00:10.332 TCP 23.104.0.1:44416 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:51:32.339 00:05:01.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 05:55:39.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53580 10 6452 1 2025-09-23 05:56:19.890 00:00:10.325 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:56:39.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56860 10 6452 1 2025-09-23 05:57:13.628 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 05:57:13.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 05:57:20.257 00:00:10.363 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:57:39.610 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-09-23 05:58:20.659 00:00:10.833 TCP 23.104.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-09-23 05:58:39.825 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1066, avg pps: 0, avg bpp: 317 Time window: 2025-09-23 04:56:32 - 2025-09-23 05:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0016s Wall: 0.0029s flows/second: 55765.4 Runtime: 0.0030s